Exploit for Double Free in Microsoft

CVE-2025-62215 Exploit PoC Original code credit: https://gith...

Exploit for Double Free in Openbsd Openssh

CVE-2023-25136 Vulnerability Demonstration This project provi...

CVE-2025-65013

creationtimestamp| type| source ---|---|--- 2025-11-18 12:31:49+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x...

CVE-2025-65014

creationtimestamp| type| source ---|---|--- 2025-11-18 12:31:23+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-5mrf-j8v6-f45g...

GHSA-5J98-MCP5-4VW2 glob CLI: Command injection via -c/--cmd executes matches with shell:true

Summary The glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c is used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to...

CVE-2025-63943

creationtimestamp| type| source ---|---|--- 2025-11-14 21:00:05+00:00| published-proof-of-concept| Telegram/4cRtrOOVHDaY8hidDiXsX2pRwjU2Jcooi4Fr3TpP4Xu3Ko...

CVE-2025-56527

creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...

CVE-2025-56526

creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...

Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts

Cybersecurity researchers are sounding the alert about an authentication bypass vulnerability in Fortinet FortiWeb Web Application Firewall WAF that could allow an attacker to take over admin accounts and completely compromise a device. "The watchTowr team is seeing active, indiscriminate...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the shareDeleteHandler function, which handles deletion requests based solely on the share hash, and does not verify whether the link.UserID matches the currently authenticated user's ID d.user.ID. An attacker...

GHSA-6CQF-CFHV-659G File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function

Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...

CVE-2025-63830

creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...

CVE-2024-4890

creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...

CVE-2025-31931

creationtimestamp| type| source ---|---|--- 2025-11-11 23:12:13+00:00| published-proof-of-concept| Telegram/qk0xbo4HJ4SgyIuAy9GGDmkgHDhpw2mchBX-MgrEMQAw...

CVE-2025-55449

creationtimestamp| type| source ---|---|--- 2025-11-11 13:12:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59265 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8 2025-12-10 05:34:39+00:00| published-proof-of-concept|...

Exploit for Reachable Assertion in Open5Gs

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC This repository cont...

42_Boot2Root

It is an offensive tool for Linux. This repository contains a Pr...

Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding

As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online FIDO Universal Authentication Framework UAF authentication protocol, which seeks to reduce the use of traditional passwords in favor of...

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

CVE-2023-45612 PoC This repository contains a proof of concep...

CVE-2025-61299

creationtimestamp| type| source ---|---|--- 2025-11-07 05:43:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58649 2025-11-07 09:00:04+00:00| published-proof-of-concept| Telegram/rxBXc7mJGGU5sBhvwkQkmojEU4Xu3I8--yJupvnllAH1D4...